EP0881560A2 - Dispositif de commande de stockage de données à connexion Fibre-Channel - Google Patents

Dispositif de commande de stockage de données à connexion Fibre-Channel Download PDF

Info

Publication number
EP0881560A2
EP0881560A2 EP98109862A EP98109862A EP0881560A2 EP 0881560 A2 EP0881560 A2 EP 0881560A2 EP 98109862 A EP98109862 A EP 98109862A EP 98109862 A EP98109862 A EP 98109862A EP 0881560 A2 EP0881560 A2 EP 0881560A2
Authority
EP
European Patent Office
Prior art keywords
host computer
control device
storage control
port
information
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
EP98109862A
Other languages
German (de)
English (en)
Other versions
EP0881560A3 (fr
Inventor
Akemi Sanada
Toshio Nakano
Hidehiko Iwasaki
Masahiko Sato
Kenji Muraoka
Kenichi Takamoto
Masaaki Kobayashi
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Hitachi Ltd
Original Assignee
Hitachi Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Hitachi Ltd filed Critical Hitachi Ltd
Priority to EP10173492A priority Critical patent/EP2249225A1/fr
Priority to EP09015740A priority patent/EP2163962A3/fr
Publication of EP0881560A2 publication Critical patent/EP0881560A2/fr
Publication of EP0881560A3 publication Critical patent/EP0881560A3/fr
Withdrawn legal-status Critical Current

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/78—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure storage of data
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
    • G06F21/6272—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database by registering files or documents with a third party
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F3/00—Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
    • G06F3/06—Digital input from, or digital output to, record carriers, e.g. RAID, emulated record carriers or networked record carriers
    • G06F3/0601—Interfaces specially adapted for storage systems
    • G06F3/0602—Interfaces specially adapted for storage systems specifically adapted to achieve a particular effect
    • G06F3/062—Securing storage systems
    • G06F3/0622—Securing storage systems in relation to access
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F3/00—Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
    • G06F3/06—Digital input from, or digital output to, record carriers, e.g. RAID, emulated record carriers or networked record carriers
    • G06F3/0601—Interfaces specially adapted for storage systems
    • G06F3/0628—Interfaces specially adapted for storage systems making use of a particular technique
    • G06F3/0629—Configuration or reconfiguration of storage systems
    • G06F3/0635—Configuration or reconfiguration of storage systems by changing the path, e.g. traffic rerouting, path reconfiguration
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F3/00—Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
    • G06F3/06—Digital input from, or digital output to, record carriers, e.g. RAID, emulated record carriers or networked record carriers
    • G06F3/0601—Interfaces specially adapted for storage systems
    • G06F3/0628—Interfaces specially adapted for storage systems making use of a particular technique
    • G06F3/0629—Configuration or reconfiguration of storage systems
    • G06F3/0637—Permissions
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F3/00—Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
    • G06F3/06—Digital input from, or digital output to, record carriers, e.g. RAID, emulated record carriers or networked record carriers
    • G06F3/0601—Interfaces specially adapted for storage systems
    • G06F3/0628—Interfaces specially adapted for storage systems making use of a particular technique
    • G06F3/0655—Vertical data movement, i.e. input-output transfer; data movement between one or more hosts and one or more storage devices
    • G06F3/0659—Command handling arrangements, e.g. command buffers, queues, command scheduling
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F3/00—Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
    • G06F3/06—Digital input from, or digital output to, record carriers, e.g. RAID, emulated record carriers or networked record carriers
    • G06F3/0601—Interfaces specially adapted for storage systems
    • G06F3/0628—Interfaces specially adapted for storage systems making use of a particular technique
    • G06F3/0662—Virtualisation aspects
    • G06F3/0665—Virtualisation aspects at area level, e.g. provisioning of virtual or logical volumes
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F3/00—Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
    • G06F3/06—Digital input from, or digital output to, record carriers, e.g. RAID, emulated record carriers or networked record carriers
    • G06F3/0601—Interfaces specially adapted for storage systems
    • G06F3/0668—Interfaces specially adapted for storage systems adopting a particular infrastructure
    • G06F3/067—Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2129—Authenticate client device independently of the user
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2141—Access rights, e.g. capability lists, access control lists, access tables, access matrices
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2149—Restricted operating environment

Definitions

  • the present invention relates to storage control apparatus with ANSIX3T11-standardized fiber channels as an interface with its upper-level or "host" computers, and more particularly to a storage controller device which is employable in a computer system including a host computer and a storage control device plus a storage unit operable under control of the storage controller and which is for elimination of unauthorized access attempts upon issuance of a request to access the storage unit as sent from the host computer to the storage controller.
  • a network security system between computer systems supporting the TCP/IP protocol includes a memory device for storage of predefined identification (ID) information of those users who are authorized to log-in the network.
  • ID predefined identification
  • the security system has a function of interrupting or disenabling any connection to the network whenever an unauthorized person attempts to log-in the network for invasion or "hacking" purposes.
  • Still another approach is based on the "ESCON" interface architecture available from IBM corp., which is designed so that by utilizing the fact that a host computer stores therein a logical address thereof as the source address of the host computer in the form of a frame and transmits the same to a storage controller device, the storage controller has a function of checking whether an incoming logical address in such frame matches a logical address that has been preset in the storage controller.
  • Any one of the prescribed prior art approaches are not more than a mere unauthorized access elimination means that is inherently directed to those interfaces with a single type of layer mounted on a host logical layer.
  • the ANSIX3T11-standardized fiber channel is the "network type" architecture, which is capable of providing the host logical layer with various built-in layers mountable thereon, such as for example TCP/IP, SCSI, ESCON, IPI and the like. More specifically, since the buffer contents are to be moved from one device to another in a way independent of the data format and contents, it may offer logical compatibility with other interface configurations and therefore remains physically accessible without suffering from any particular limitations. Especially, in a storage system including this fiber channel and a storage device with a plurality of storage regions such as a disk array device or "subsystem,” the storage regions are usable in common by an increased number of host computers. Accordingly, the prior art unauthorized access determent schemes remain insufficient in performance and reliability. A need thus exists for achievement of secrecy protection based on users' intentional security setup.
  • An object of the present invention is to provide a fiber channel connection storage control device adapted for use in a computer system which employs an ANSIX3T11-standardized fiber channel as an interface between one or more host computers and a storage control device and which includes host computers and a storage control device plus more than one storage device operable under control of the storage control device, wherein the fiber channel connection storage control device has a security function of, in the environment capable of physically receiving any access from the host computers, eliminating or deterring unauthorized access attempts from the host computers to the storage control device, which did not have any means for rejecting unauthorized access from host computers.
  • Another object of the present invention is to provide a fiber channel connection storage control device having a scheme capable of readily managing an accessible host computer or computers for elimination or determent of any unauthorized access from such host computers.
  • N_Port_Name information of an accessible host computer or computers which information distinctly identifies each host computer in a one-by-one basis is set in the storage control device for comparison with N_Port_Name information as stored in a frame to be sent from a host computer to thereby determine whether a presently desired access attempt is permissible or not.
  • One practical feature of the present invention in order to attain the prescribed objects is to have a means for inputting by use of a panel or the like the N_Port_Name information that is the information being issued from a host computer for distinct identification of the host computer, and then for storing such input information in a control memory of the storage control device as a control table.
  • the storage control device has a means for permanently storing therein the information until it is reset or updated.
  • control table by arranging the control table to be stored in a non-volatile control memory, it becomes possible to protect the management information even upon occurrence of any possible power supply failure or interruption.
  • the host computer after start-up of the host computer, the host computer generates and issues a frame that stores therein N_Port_Name information to the storage control device; the storage control device has means for comparing, when the storage control device receives this information, the maintained N_Port_Name information for distinct identification of the host computer to the N_Port_Name information as stored in the received frame: If the comparison results in a match between the two, then continue to execute the processing based on an instruction of the frame received; alternatively, if the comparison tells failure in match then return to the host computer an LS_RJT frame which rejects the presently received frame. It is thus possible for the storage control device to inhibit or deter any unauthorized access from the host computer.
  • a further practical feature of the present invention lies in presence of a means for setting N_Port_Name information items which are greater in number than or equal to a physical number of host interface units (ports) as owned by the storage control device. More specifically, a means is specifically provided for setting a plurality of N_Port_Name information items per port. This makes it possible to accommodate a multi-logical path configuration upon either a fiber channel fabric or a multi-logical path configuration upon switch connections.
  • the system has manager means for performing management--within the storage control device in a one-to-one correspondence relation per channel path route--of storage regions under control of the storage control device, including a logical unit number (LUN)-based logical disk extent, a physical volume extent, a RAID group-based logical disk extent and the like, versus ports of the storage control device and N_Port_Name information of a host computer(s).
  • LUN logical unit number
  • the storage control device has means for performing table based management and the storage information of a control table-based manager/holder means for dealing with the correspondence among the N_Port_Name information of an accessible host computer, ports of the storage control device, and the storage device, and further handling the correspondence management of media in the case of library apparatus, while simultaneously having a means for comparing, upon receipt of a frame as sent thereto, the information within the frame to the information in the control table, thereby eliminating unauthorized access attempts from host computers.
  • a control table-based manager/holder means for dealing with the correspondence among the N_Port_Name information of an accessible host computer, ports of the storage control device, and the storage device, and further handling the correspondence management of media in the case of library apparatus, while simultaneously having a means for comparing, upon receipt of a frame as sent thereto, the information within the frame to the information in the control table, thereby eliminating unauthorized access attempts from host computers.
  • the present invention comprises means for protecting the management information through inputting of a password upon setup of the information under management of the storage control device using a panel or the like.
  • the means for setting the information as managed by the storage control device may be designed so that the use of the panel or the like is replaced with use of a utility program or programs of host computers to attain the intended setup operation.
  • a computer system employing the ANSIX3T11-standardized fiber channel as the interface between host computers and a storage control device and also including the host computers, the storage control device and more than one storage device under control of the storage control device, it is possible to deter unauthorized access from any one of the host computers, which in turn makes it possible to attain the intended data secrecy protection within the storage device.
  • the storage device may be efficiently utilized to meet the needs upon alteration of the usage per storage region.
  • Fig. 1 is a diagram showing a hardware configuration of a first practicing form of the present invention.
  • Fig. 2 is a diagram showing a format of a frame in the first practicing form.
  • Fig. 3 is a diagram showing a format of a frame header which constitutes the frame shown in Fig. 2.
  • Fig. 4(A) is a format diagram of a payload of FCP_CMND which is one of frames shown in Fig. 2; and, Fig. 4(B) is a format diagram of FCP_CDB constituting the payload.
  • Fig. 5 shows one example of a sequence performing delivery of a data frame between a host computer and a device in the first practicing form, wherein Fig. 5(A) shows a sequence upon attempting of log-in, Fig. 5(B) is a sequence diagram when execution of a read command, and Fig. 5(C) is a sequence diagram upon receipt of a write command.
  • Fig. 6 is a diagram showing a control table used by a storage controller in controlling a host computer or computers in the first practicing form.
  • Fig. 7 shows a flow chart of frame processing as executed by the storage controller upon issuance of a log-in request from an upper-level computer (host) in the first practicing form.
  • Fig. 8 is a diagram showing a control table used by the storage controller for management of storage regions in the first practicing form.
  • Fig. 9 shows a flow chart of frame processing as executed by the storage controller upon issuance of an I/O request from the host in the first practicing form.
  • Fig. 10 is a diagram showing a hardware configuration in the case where the storage device under control of the storage controller is an optical disk library as a second practicing form of the present invention.
  • Fig. 11 is a diagram showing a control table as managed by the storage controller in the second practicing form shown in Fig. 10.
  • Fig. 1 is a diagram showing a hardware configuration of the storage system in the case where a storage device operable under control of a storage controller unit are a disk array module or "subsystem.”
  • reference numerals 10, 20, 30 designate host computers each of which may be a central processing unit for executing data processing required.
  • Numeral 40 designates a storage controller unit of the disk array subsystem in which the principles of the present invention are implemented.
  • the storage controller 40 is constituted from a fiber channel control unit 41 which may be a protocol processor including a direct memory access (DMA) for controlling data transmission between it and the host computers 10, 20, 30, a microprocessor 42 for controlling all possible operations of the storage controller, a control memory 43 for storing therein microprograms for control of the operation of the controller along with control data associated therewith, a cache control unit 44 for controlling writing and reading data to and from the cache, a disk cache 45 for temporarily buffering write data and read data to/from a disk drive(s), a device interface control unit 46 which may be a protocol processor including DMA for controlling data transfer between it and its associative disk drives, and a panel 47 for use in inputting device configuration information to the storage controller.
  • DMA direct memory access
  • Numeral 50 is the disk array subsystem operable under control of the storage controller 40.
  • the disk array subsystem 50 is a device that stores therein data of host computers, which may be arranged to includes therein a plurality of individual separate disks as disposed to have certain redundancy.
  • the disks constituting the disk array subsystem 50 are logically divided into portions or "partitions" which may be set at specified RAID levels different from one another.
  • the partitions are called the RAID group.
  • This RAID group is further logically subdivided into regions that may be SCSI access units called the logical units (LUs), each of which has its unique logical unit number (LUN) adhered thereto.
  • the disk array subsystem 50 illustrated herein comes with two LUs: an LU0 (51) that is the LU indicating the number LUN0, and LU1 (52) with the number LUN1.
  • the number of LUs should not be exclusively limited to the two (2) as shown in Fig. 1 and may be increased more; in the case of single target functions, the LU may be maximally increased up to eight (8) per target.
  • storage regions called the LUs are used as the access units, such storage regions each acting as the access unit may alternatively be those storage regions with a physical volume being as the unit or with a RAID group as unit.
  • the host computers 10, 20, 30 and storage controller 40 employ a fiber channel 60 as the interface, and are connected together via a device known as the "fabric.”
  • FIG. 1 An operation of the system shown in Fig. 1 will be explained under the assumption that the operation is performed in one exemplary case where the host computer 10 performs data transfer toward the disk array subsystem 50 by way of the storage controller 40.
  • the following description will mainly deal with the flow of control and the data flow.
  • the fiber channel control unit 41 recognizes such request then issuing a task interruption request to the microprocessor 42.
  • the microprocessor 42 causes the control memory 43 to store therein both command information from the host computer and necessary control information required in this invention.
  • the microprocessor 42 instructs the fiber channel control unit 41 to execute data transfer and then stores the transferred data in the cache 45 via the cache controller 44.
  • the fiber channel control unit 41 issues a write completion report thereto.
  • the microprocessor 42 controls the device interface controller 46 thus permitting data and redundancy data to be written into the disk array subsystem 50.
  • a new parity is created based on the old data and old parity as well as new data; on the contrary, according to the control scheme of this invention, the microprocessor 42 does the same using the device interface controller 46 and the cache control unit 44 as well as the control memory 43 plus the cache 45.
  • the microprocessor 42 upon receipt of read command information as the command information from the host computer 10, the microprocessor 42 sends an instruction to the device interface control unit 46 for providing access to the disk array subsystem 50 which stores therein the data block of this access request to read data therefrom, which data will then be stored into the cache 45 through the cache control unit 44.
  • the microprocessor 42 issues an instruction to the fiber channel control unit 41; the fiber channel control unit 41 in turn transfers the data stored in the cache 45 toward the host computer 10 and then sends a read completion report to the host computer after completion of the data transfer required.
  • the fiber channel may be a high-speed interface capable of transferring data at 100 MB/s at a distance of 10km in maximum.
  • the fiber channel's architecture is designed to send data from a "source” buffer to its "destination” buffer while moving the buffer contents from one device to another in a way independent of the format and contents of data per se; accordingly, any overhead which processes different network communications protocols will no longer take place thus enabling achievement of high-speed data transmission.
  • a variety of kinds of layers may be built in the upper-level logical layer, such as for example TCP/IP, SCSI, ESCON, IPI and the like. In other words, it does have the logical compatibility with other interfaces.
  • the device called the fabric is expected to execute the complicated device-to-device connection/exchange function, which leads to the capability of organization of a multi-layered logical bus configuration.
  • the basic unit based on which the fiber channel exchanges or distributes data is called the "frame.” Next, this frame will be explained with reference to Fig. 2.
  • a frame 70 is configured from a start-of-frame (SOF) section 71, frame header 72, data field 73, cyclic redundancy check (CRC) 74, and end-of-frame (EOF) 75.
  • SOF start-of-frame
  • CRC cyclic redundancy check
  • EEF end-of-frame
  • the SOF 71 is an identifier of 4 bytes which is put at the top of the frame.
  • the EOF 75 is a 4-byte identifier at the last location of the frame; a combination of SOF 71 and EOF 75 indicates the boundary of frame. In the fiber channel, an "idle" signal or signals flow therein in cases where any frames are absent.
  • the frame header 72 contains therein a frame type, host protocol type, source and destination's N_Port_ID information, N_Port_Name information and the like.
  • the N_Port_ID is information indicative of an address
  • N_Port_Name represents a port identifier.
  • the header of upper-level layer may be put at the top part of the data field 73. This is followed by a payload section which carries data per se.
  • CRC 74 is a 4 byte check code for use in checking or verifying the frame header and data in the data field.
  • the frame header 72 has a format 80 as shown in Fig. 3.
  • a destination identifier (D_ID) 81 is an address identifier on the frame reception side
  • a source identifier (S_ID) 82 is an identifier indicative of the N_Port address on the frame transfer side, each of which may involve N_Port_ID, N_Port_Name information, etc.
  • FCP_CMND fiber channel protocol for SCSI command and which is one of payloads of the data field 73 constituting the frame
  • a logical unit number LUN for issuance of a command is assigned to an FCP logical unit number (FCP_LUN) field 91.
  • a command control parameter is assigned to an FCP control (FCP_CNTL) field 92.
  • an SCSI command descriptor block is stored in an FCP command descriptor block (FCP_CDB) field 93 for indication of a command type such as a read command "Read” or the like, an address such as LUN, and a block number.
  • the amount of data to be transferred in response to the command is designated by byte number in an FCP data length (FCP_DL) field 94.
  • Data exchange/distribution operations are executed by use of the frame thus arranged as described above.
  • Frames employed herein may be generally classified based on function into a data frame and link control frame.
  • the data frame is for use in transferring information, and thus has data and command as used by the host protocol, which are built in the payload section of the data field thereof.
  • the link control frame is typically used for indication of a success or failure of frame distribution.
  • the sequence in the fiber channel may refer to a collection of data frames concerned which will be unidirectionally transferred from one N_Port to another N_Port, the sequence corresponding to the phase in SCSI.
  • a collection of such sequences is called the "exchange.”
  • One example is that a collection or group of certain sequences will be called the exchange, which sequences undergo exchange/distribution processing for execution of a command within a time period spanning from the issuance of such command to the completion of command execution (including command issuance, data transmission, and completion reporting).
  • the "exchange” may be equivalent to I/O of SCSI.
  • Figs. 5(A), 5(B) and 5(C) show a log-in sequence (100), read command sequence (110), and write command sequence (120), respectively.
  • the intended communication becomes available in a particular event in which the host computer sends the device a port log-in (N_Port Login) frame containing a communication parameter, and then the device actually receives this frame. This will be called the "log-in.”
  • Fig. 5(A) shows such log-in sequence (100).
  • the host computer first sends a PLOGI frame to the device at a sequence 101 thereby to require a log-in attempt.
  • the device in turn sends an acknowledge (ACK) frame to the host computer thereby informing it of actual receipt of the PLOGI frame.
  • ACK acknowledge
  • the device operates to send the host computer either an accept (ACC) frame if the log-in request is accepted or a link service reject (LS-RJT) frame if the request is to be rejected.
  • ACC accept
  • LS-RJT link service reject
  • the host computer sends the FCP_CMND frame to the device for requiring execution of a read operation.
  • the device then sends back the ACK frame to the host computer.
  • the device sends the host computer an FCP transfer ready (FCP_XFER_RDY) frame thereby notifying it of completion of preparation for data transmission.
  • the host computer then sends the ACK frame to the device.
  • the routine goes next to sequence 113 which permits the device to send the host computer an FC data (FC_DATA) frame and then transfer data thereto.
  • FC_DATA FC data
  • the host computer sends back ACK frame to the device.
  • the device sends the FCP_RSP frame to the host computer to thereby inform it of successful completion of data transmission required.
  • the host computer then sends back ACK frame to the device.
  • the host computer sends the device an FCP_CMND frame to perform issuance of a write request.
  • the device sends ACK frame to the host computer.
  • the device sends FCP_XFER_RDY frame to the host computer in order to inform it of the fact that data writing is available.
  • the host computer sends ACK frame to the device.
  • the host computer sends FCP_DATA frame to the device for execution of data transfer.
  • the device then sends ACK frame to the host computer.
  • the device sends the host computer an FCP response (FCP_RSP) frame thereby notifying it of successful completion of data reception concerned.
  • the host computer then sends ACK frame to the device.
  • a first operation to be done in Fig. 1 is that the user sets or establishes a list of one or several host computers that may provide access to the microprocessor 42 of the storage controller 40 prior to start-up of the host computers 10, 20, 30. More specifically, the N_Port_Name and N_Port_ID information capable of identifying such host computer(s) may be input using the panel 47. When this is done, in order to attain the secrecy protection function upon inputting to the panel, entry of a password should be required upon inputting of the information to thereby enhance the security.
  • the host computers 10, 20 are capable of getting access to the disk array subsystem 50 whereas the host computer 30 is incapable of accessing disk array subsystem 50.
  • the N_Port_Name is such that the host computer 10 is HOSTA
  • host computer 20 is HOSTB
  • host computer 30 is HOSTC.
  • the port of the fiber channel control unit 41 of the storage controller 40 is CTL0P0. If this is the case, the resulting log-in request control table 130 is as shown in Fig. 6.
  • the information stored in the log-in request control table 130 is saved in the hard disk region 50 upon occurrence of power off. Or alternatively, upon updating of information, reflection is performed to the memory 43 and the disk 50. This may enable the storage controller 40 to permanently hold or store therein the information until it is subject to resetting or re-establishment.
  • N_Port_ID other than the N_Port_Name
  • N_Port_Name it is desirable that the N_Port_Name information be used as an object to be checked for security. This is because of the fact that the N_Port_ID will possibly be altered or modified and is not the numeral value under management by the users.
  • the host computers 10, 20, 30 start up each issuing a PLOGI frame, which is the log-in request frame storing therein the N_Port_Name information.
  • a PLOGI frame which is the log-in request frame storing therein the N_Port_Name information.
  • the microprocessor 42 of the storage controller 40 sends back each host computer an ACK frame representative of actual receipt of the frame.
  • the microprocessor 42 attempts to extract N_Port_Name information as stored in the frame, and then performs comparison for determining whether such N_Port_Name information has already been registered in the N_Port_Name list within the presently available preset control table.
  • the N_Port_Name information that is presently stored in the frames issued from the host computers 10, 20 may match the N_Port_Name information which has been registered within the control table so that the microprocessor 42 of the storage controller 40 returns the ACC frame to the host computers 10, 20 as a mark of actual receipt of the individual log-in request while simultaneously continuing to execute the log-in processing.
  • the N_Port_Name information stored in the frame as issued from the remaining host computer 30 fails to match the N_Port_Name information registered in the control table so that the microprocessor 42 of storage controller 40 returns to the host computer 30 an LS_RJT frame which contains therein a reject parameter for rejection of its connection attempt.
  • the microprocessor 42 of storage controller 40 first establish a list of those accessible host computers per LUN to the microprocessor 42 of storage controller 40 before startup of the host computers 10, 20, 30. Then, input using the panel 47 certain information such as the N_Port_Name or N_Port_ID information or the like capable of identifying the host computers. When this is done, request entry of a password upon inputting of such information in order to achieve the secrecy protection function through input to the panel 47, thereby enhancing the security.
  • the LU0 (51) is accessible from the host computer 10 via a port of the fiber channel control unit 41 of the storage controller 40 whereas the LU1 (52) is accessible from the host computer 20 via a port of fiber channel control unit 41 of storage controller 40.
  • the host computer 10 is HOSTA while host computer 20 is HOSTB.
  • a port of fiber channel control unit 41 of storage controller 40 is CTL0P0. If this is the case, an I/O request control table 140 is as shown in Fig. 8.
  • This I/O request control table 140 shown in Fig. 8 is established in the storage space of a nonvolatile memory thereby making it possible to protect the management information against loss or destruction due to any accidental power interruption or failure.
  • the information stored in the I/O request control table 140 shown in Fig. 8 is to be stored in the hard disk region 50.
  • reflection is carried out to the memory 43 and disk 50 upon updating of information. This makes it possible to permanently hold or maintain the information until it is reestablished at later stages.
  • channel path route is single, the same goes with other systems having a plurality of channel path routes.
  • the host computer 10 desires to issue the I/O request to LU0 (51)
  • the host computer 10 generates and issues a specific frame storing therein SCSI CDB toward the storage controller 40.
  • the storage controller 40 Upon receiving of this frame, the storage controller 40 first sends back the ACK frame representative of actual receipt of this frame.
  • the microprocessor 42 extracts the N_Port_Name information stored in the frame along with the LUN number within the CDB, and then performs comparison to determine whether such N_Port_Name information and LUN number are registered to the list within the control table which has been preset and maintained presently.
  • the microprocessor 42 of the storage controller 40 receives the command and continues execution of I/O processing.
  • the microprocessor 42 first returns to the host computer 20 the ACK frame indicative of actual receipt of this frame.
  • the microprocessor 42 operates to extract both the N_Port_Name information stored in the frame and the LUN number within CDB, and then executes search processing to thereby determine whether such N_Port_Name information and LUN number are present in the management table.
  • the microprocessor 42 of storage controller 40 sends an LS_RJT frame to the host computer 20 for rejection of the I/O request thereof.
  • the storage controller may prevent any unauthorized access attempts.
  • any other information may be employed for comparison, including but not limited to the N_Port_Name information as stored in any one of the other host computer frames.
  • the storage device under control of the fiber channel connection storage controller should not exclusively be limited to the disk array subsystem stated supra, and the principles of the present invention may alternatively be applicable to any systems employing an optical disk drive, magneto-optical disk drive and magnetic tape storage as well as library apparatus including one or several of them in combination.
  • Reference numeral 150 designates such optical disk library subsystem under control of the storage controller 40; numeral 151 indicates an optical disk drive; 152 to 156, optical disk media.
  • the user is expected before startup of the host computers 10, 20, 30 to make use of the panel to establish a correspondence relation among the individual medium and drive as well as port relative to the N_Port_Name information while maintaining in a micro-program the right or authorization of accessibility of host computers.
  • a request control table 160 is as shown in Fig. 11.
  • volume information must be stored in CDB in the payload constituting each frame; accordingly, the storage controller 40 is responsive to receipt of the frame for comparing both the N_Port_Name information within the frame and a medium identifier within the payload to corresponding items as presently stored in the control table which has been preset and held in the storage controller 40. In this way, applying the principles of the invention may enable the storage controller to eliminate any possible unauthorized access attempts from the host computers.
EP98109862A 1997-05-29 1998-05-29 Dispositif de commande de stockage de données à connexion Fibre-Channel Withdrawn EP0881560A3 (fr)

Priority Applications (2)

Application Number Priority Date Filing Date Title
EP10173492A EP2249225A1 (fr) 1997-05-29 1998-05-29 Dispositif de commande de stockage de données à connexion Fibre-Channel
EP09015740A EP2163962A3 (fr) 1997-05-29 1998-05-29 Dispositif de commande de stockage de données à connexion Fibre-Channel

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
JP140029/97 1997-05-29
JP14002997A JP3228182B2 (ja) 1997-05-29 1997-05-29 記憶システム及び記憶システムへのアクセス方法

Publications (2)

Publication Number Publication Date
EP0881560A2 true EP0881560A2 (fr) 1998-12-02
EP0881560A3 EP0881560A3 (fr) 2006-08-23

Family

ID=15259307

Family Applications (3)

Application Number Title Priority Date Filing Date
EP09015740A Withdrawn EP2163962A3 (fr) 1997-05-29 1998-05-29 Dispositif de commande de stockage de données à connexion Fibre-Channel
EP98109862A Withdrawn EP0881560A3 (fr) 1997-05-29 1998-05-29 Dispositif de commande de stockage de données à connexion Fibre-Channel
EP10173492A Withdrawn EP2249225A1 (fr) 1997-05-29 1998-05-29 Dispositif de commande de stockage de données à connexion Fibre-Channel

Family Applications Before (1)

Application Number Title Priority Date Filing Date
EP09015740A Withdrawn EP2163962A3 (fr) 1997-05-29 1998-05-29 Dispositif de commande de stockage de données à connexion Fibre-Channel

Family Applications After (1)

Application Number Title Priority Date Filing Date
EP10173492A Withdrawn EP2249225A1 (fr) 1997-05-29 1998-05-29 Dispositif de commande de stockage de données à connexion Fibre-Channel

Country Status (3)

Country Link
US (11) US6484245B1 (fr)
EP (3) EP2163962A3 (fr)
JP (3) JP3228182B2 (fr)

Cited By (23)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1122628A2 (fr) * 2000-02-07 2001-08-08 Emc Corporation Contrôler l'accès à un dispositif de stockage
EP1124172A2 (fr) * 2000-02-07 2001-08-16 Emc Corporation Contrôler l'accès à un dispositif de stockage
EP1221100A1 (fr) * 1999-09-13 2002-07-10 International Business Machines Corporation Systeme et procede de mise en correspondance de volumes d'hotes dans un environnement informatique a hotes multiples
US6460113B1 (en) 2000-01-25 2002-10-01 Dell Products L.P. System and method for performing backup operations using a fibre channel fabric in a multi-computer environment
US6684209B1 (en) 2000-01-14 2004-01-27 Hitachi, Ltd. Security method and system for storage subsystem
US6742034B1 (en) 1999-12-16 2004-05-25 Dell Products L.P. Method for storage device masking in a storage area network and storage controller and storage subsystem for using such a method
US6779083B2 (en) 2001-07-13 2004-08-17 Hitachi, Ltd. Security for logical unit in storage subsystem
EP1115064A3 (fr) * 1999-12-14 2004-12-29 Hitachi, Ltd. Sous-système de stockage et contrôleur de stockage
US6854034B1 (en) * 1999-08-27 2005-02-08 Hitachi, Ltd. Computer system and a method of assigning a storage device to a computer
GB2408602A (en) * 2003-11-27 2005-06-01 Hitachi Ltd Controlling remote access to storage in accordance with the SCSI protocol
US6950871B1 (en) * 2000-06-29 2005-09-27 Hitachi, Ltd. Computer system having a storage area network and method of handling data in the computer system
EP1324174A3 (fr) * 2001-12-28 2005-11-09 Hewlett-Packard Company La méthode pour l'usage de la division pour fournir la capacité sur demande dans des bibliothèques de donnés
US6968434B2 (en) 2000-05-24 2005-11-22 Hitachi, Ltd. Method and apparatus for controlling access to storage device
US7047290B2 (en) 2001-04-10 2006-05-16 Hitachi, Ltd. Storage controller and computer system for managing information related to connection port
WO2006062783A2 (fr) * 2004-12-10 2006-06-15 Storage Technology Corporation Procede de prevention de la corruption de donnees causee par des connexions inappropriees d'une unite de commande de stockage
US7082497B2 (en) 2001-12-28 2006-07-25 Hewlett-Packard Development Company, L.P. System and method for managing a moveable media library with library partitions
US7111138B2 (en) 2003-09-16 2006-09-19 Hitachi, Ltd. Storage system and storage control device
DE10065642B4 (de) * 1999-12-30 2006-09-21 Avago Technologies Storage Ip (Singapore) Pte. Ltd. Verfahren zum Abschließen der Ausführung einer Ferntransaktion in einem Faserkanalknoten und Faserkanalknoten, der die Ausführung einer Ferntransaktion abschließt
US7216209B2 (en) 2003-12-15 2007-05-08 Hitachi, Ltd. Data processing system having a plurality of storage systems
US7222172B2 (en) 2002-04-26 2007-05-22 Hitachi, Ltd. Storage system having virtualized resource
US7363425B2 (en) 2001-12-28 2008-04-22 Hewlett-Packard Development Company, L.P. System and method for securing drive access to media based on medium identification numbers
CN100407188C (zh) * 2000-03-09 2008-07-30 戴尔产品有限公司 在群集计算环境中管理存储资源的系统和方法
US7657727B2 (en) 2000-01-14 2010-02-02 Hitachi, Ltd. Security for logical unit in storage subsystem

Families Citing this family (208)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE19708755A1 (de) * 1997-03-04 1998-09-17 Michael Tasler Flexible Schnittstelle
US5956723A (en) * 1997-03-21 1999-09-21 Lsi Logic Corporation Maintaining identifier information in a memory using unique identifiers as a linked list
JP3228182B2 (ja) * 1997-05-29 2001-11-12 株式会社日立製作所 記憶システム及び記憶システムへのアクセス方法
USRE42761E1 (en) 1997-12-31 2011-09-27 Crossroads Systems, Inc. Storage router and method for providing virtual local storage
US5941972A (en) 1997-12-31 1999-08-24 Crossroads Systems, Inc. Storage router and method for providing virtual local storage
US6421711B1 (en) * 1998-06-29 2002-07-16 Emc Corporation Virtual ports for data transferring of a data storage system
US7870239B1 (en) * 1998-06-30 2011-01-11 Emc Corporation Method and system for securing network access to dynamically updateable data stored in a data storage system
US7756986B2 (en) * 1998-06-30 2010-07-13 Emc Corporation Method and apparatus for providing data management for a storage system coupled to a network
US6263445B1 (en) * 1998-06-30 2001-07-17 Emc Corporation Method and apparatus for authenticating connections to a storage system coupled to a network
US6765919B1 (en) 1998-10-23 2004-07-20 Brocade Communications Systems, Inc. Method and system for creating and implementing zones within a fibre channel system
US7233977B2 (en) * 1998-12-18 2007-06-19 Emc Corporation Messaging mechanism employing mailboxes for inter processor communications
JP4874515B2 (ja) * 1998-12-22 2012-02-15 株式会社日立製作所 記憶装置システム
US6542961B1 (en) 1998-12-22 2003-04-01 Hitachi, Ltd. Disk storage system including a switch
JP2000187559A (ja) * 1998-12-24 2000-07-04 Hitachi Ltd ディスクシステム
US6400730B1 (en) * 1999-03-10 2002-06-04 Nishan Systems, Inc. Method and apparatus for transferring data between IP network devices and SCSI and fibre channel devices over an IP network
US7082462B1 (en) 1999-03-12 2006-07-25 Hitachi, Ltd. Method and system of managing an access to a private logical unit of a storage system
JP3837953B2 (ja) 1999-03-12 2006-10-25 株式会社日立製作所 計算機システム
JP2000278290A (ja) * 1999-03-29 2000-10-06 Matsushita Electric Ind Co Ltd ネットワーク管理システム
JP2000347808A (ja) * 1999-06-02 2000-12-15 Hitachi Ltd ネットワークに直接接続可能なディスク装置
JP4461511B2 (ja) * 1999-06-09 2010-05-12 株式会社日立製作所 ディスクアレイ装置及びディスク装置へのデータ読み出し／書き込み方式
JP3853540B2 (ja) 1999-06-30 2006-12-06 日本電気株式会社 ファイバチャネル接続磁気ディスク装置およびファイバチャネル接続磁気ディスク制御装置
US6845395B1 (en) * 1999-06-30 2005-01-18 Emc Corporation Method and apparatus for identifying network devices on a storage network
JP2001034427A (ja) * 1999-07-23 2001-02-09 Fujitsu Ltd デバイス制御装置及び制御方法
KR100660813B1 (ko) * 1999-12-31 2006-12-26 엘지.필립스 엘시디 주식회사 엑스레이 디텍터용 어레이기판 제조방법
JP4598248B2 (ja) * 2000-01-14 2010-12-15 株式会社日立製作所 記憶サブシステムのセキュリティシステム
WO2001063424A1 (fr) * 2000-02-24 2001-08-30 Fujitsu Limited Controleur d'entree/sortie, procede d'identification de dispositif, et procede de commande des entrees/sorties
US20020108059A1 (en) * 2000-03-03 2002-08-08 Canion Rodney S. Network security accelerator
US6772231B2 (en) * 2000-06-02 2004-08-03 Hewlett-Packard Development Company, L.P. Structure and process for distributing SCSI LUN semantics across parallel distributed components
US6718404B2 (en) * 2000-06-02 2004-04-06 Hewlett-Packard Development Company, L.P. Data migration using parallel, distributed table driven I/O mapping
US7225191B1 (en) * 2000-06-27 2007-05-29 Emc Corporation Method and apparatus for verifying storage access requests in a computer storage system with multiple storage elements
JP2002027012A (ja) * 2000-07-03 2002-01-25 Fujitsu Ltd ネットワーク接続装置
US6999460B1 (en) * 2000-10-16 2006-02-14 Storage Technology Corporation Arbitrated loop port switching
US7260636B2 (en) 2000-12-22 2007-08-21 Emc Corporation Method and apparatus for preventing unauthorized access by a network device
US6549978B2 (en) * 2001-01-17 2003-04-15 International Business Machines Corporation Method for storage controllers with different data formats to access common storage configuration information
US20020112043A1 (en) * 2001-02-13 2002-08-15 Akira Kagami Method and apparatus for storage on demand service
JP2002236682A (ja) * 2001-02-13 2002-08-23 Fuji Photo Film Co Ltd データベース・システム
US7134138B2 (en) * 2001-02-15 2006-11-07 Emc Corporation Methods and apparatus for providing security for a data storage system
US7620731B1 (en) * 2001-02-21 2009-11-17 Microsoft Corporation Isolated persistent storage
JP4041656B2 (ja) 2001-03-02 2008-01-30 株式会社日立製作所 ストレージシステム及びストレージシステムにおけるデータ送受信方法
JP4484396B2 (ja) * 2001-05-18 2010-06-16 株式会社日立製作所 タービン動翼
ES2185496B1 (es) * 2001-07-17 2005-06-01 Universidad Politecnica De Valencia Equipo y metodo en linea para la deteccion, determinacion de la evolucion y cuantificacion de biomasa microbiana y otras sustancias que absorben a lo largo del espectro de luz durante el desarrollo de procesos biotecnologicos.
US20030056000A1 (en) * 2001-07-26 2003-03-20 Nishan Systems, Inc. Transfer ready frame reordering
US7389332B1 (en) 2001-09-07 2008-06-17 Cisco Technology, Inc. Method and apparatus for supporting communications between nodes operating in a master-slave configuration
US7243229B2 (en) * 2001-10-02 2007-07-10 Hitachi, Ltd. Exclusive access control apparatus and method
US6675260B2 (en) 2001-10-31 2004-01-06 Hewlett-Packard Development Company, L.P. Virtual electronic data library supporting mixed drive types using virtual libraries within a single library
JP2003141055A (ja) 2001-11-07 2003-05-16 Hitachi Ltd 計算機システムの接続設定方法
JPWO2003060679A1 (ja) * 2001-12-27 2005-05-19 富士通株式会社 情報処理装置および記憶装置
US7062614B2 (en) * 2001-12-28 2006-06-13 Hewlett-Packard Development Company, L.P. System and method for managing access to multiple devices in a partitioned data library
US6839824B2 (en) 2001-12-28 2005-01-04 Hewlett-Packard Development Company, L.P. System and method for partitioning a storage area network associated data library employing element addresses
US6999999B2 (en) 2001-12-28 2006-02-14 Hewlett-Packard Development Company, L.P. System and method for securing fiber channel drive access in a partitioned data library
US6715031B2 (en) 2001-12-28 2004-03-30 Hewlett-Packard Development Company, L.P. System and method for partitioning a storage area network associated data library
US20030126225A1 (en) * 2001-12-28 2003-07-03 Camble Peter Thomas System and method for peripheral device virtual functionality overlay
US6845431B2 (en) * 2001-12-28 2005-01-18 Hewlett-Packard Development Company, L.P. System and method for intermediating communication with a moveable media library utilizing a plurality of partitions
US7000085B2 (en) * 2001-12-28 2006-02-14 Hewlett-Packard Development Company, L.P. System and method for securing drive access to data storage media based on medium identifiers
JP2003208269A (ja) 2002-01-10 2003-07-25 Hitachi Ltd セキュリティ機構を備えた二次記憶装置およびそのアクセス制御方法
GB2384405B (en) * 2002-01-19 2004-10-06 Ibm Method and apparatus for detection of port name in a loop network
JP3993773B2 (ja) 2002-02-20 2007-10-17 株式会社日立製作所 ストレージサブシステム、記憶制御装置及びデータコピー方法
US6917763B1 (en) * 2002-03-05 2005-07-12 Nortel Networks Limited Technique for verifying fiber connectivity in a photonic network
US7421478B1 (en) 2002-03-07 2008-09-02 Cisco Technology, Inc. Method and apparatus for exchanging heartbeat messages and configuration information between nodes operating in a master-slave configuration
US7003642B2 (en) * 2002-04-17 2006-02-21 Dell Products L.P. System and method for controlling access to storage in a distributed information handling system
US7200610B1 (en) 2002-04-22 2007-04-03 Cisco Technology, Inc. System and method for configuring fibre-channel devices
US7165258B1 (en) 2002-04-22 2007-01-16 Cisco Technology, Inc. SCSI-based storage area network having a SCSI router that routes traffic between SCSI and IP networks
US7281062B1 (en) 2002-04-22 2007-10-09 Cisco Technology, Inc. Virtual SCSI bus for SCSI-based storage area network
US7587465B1 (en) 2002-04-22 2009-09-08 Cisco Technology, Inc. Method and apparatus for configuring nodes as masters or slaves
US7415535B1 (en) 2002-04-22 2008-08-19 Cisco Technology, Inc. Virtual MAC address system and method
US7188194B1 (en) 2002-04-22 2007-03-06 Cisco Technology, Inc. Session-based target/LUN mapping for a storage area network and associated method
US7433952B1 (en) 2002-04-22 2008-10-07 Cisco Technology, Inc. System and method for interconnecting a storage area network
JP4704659B2 (ja) 2002-04-26 2011-06-15 株式会社日立製作所 記憶装置システムの制御方法および記憶制御装置
JP2003316713A (ja) 2002-04-26 2003-11-07 Hitachi Ltd 記憶装置システム
US7385971B1 (en) 2002-05-09 2008-06-10 Cisco Technology, Inc. Latency reduction in network data transfer operations
US7509436B1 (en) 2002-05-09 2009-03-24 Cisco Technology, Inc. System and method for increased virtual driver throughput
US7240098B1 (en) 2002-05-09 2007-07-03 Cisco Technology, Inc. System, method, and software for a virtual host bus adapter in a storage-area network
US20040024838A1 (en) * 2002-07-31 2004-02-05 Cochran Robert A. Intelligent data tunnels multiplexed within communications media directly interconnecting two or more multi-logical-unit-mass-storage devices
JP2004110367A (ja) * 2002-09-18 2004-04-08 Hitachi Ltd 記憶装置システムの制御方法、記憶制御装置、および記憶装置システム
US7343488B2 (en) * 2002-09-30 2008-03-11 Intel Corporation Method and apparatus for providing discrete data storage security
US7945669B2 (en) 2002-10-30 2011-05-17 Emc Corporation Method and apparatus for provisioning storage resources
US7263593B2 (en) 2002-11-25 2007-08-28 Hitachi, Ltd. Virtualization controller and data transfer control method
GB0227871D0 (en) * 2002-11-29 2003-01-08 Ibm DATA processing systems
US20040117588A1 (en) * 2002-12-12 2004-06-17 International Business Machines Corporation Access request for a data processing system having no system memory
US20040117583A1 (en) * 2002-12-12 2004-06-17 International Business Machines Corporation Apparatus for influencing process scheduling in a data processing system capable of utilizing a virtual memory processing scheme
US20050055528A1 (en) * 2002-12-12 2005-03-10 International Business Machines Corporation Data processing system having a physically addressed cache of disk memory
US20040117587A1 (en) * 2002-12-12 2004-06-17 International Business Machines Corp. Hardware managed virtual-to-physical address translation mechanism
US7017024B2 (en) * 2002-12-12 2006-03-21 International Business Machines Corporation Data processing system having no system memory
US20040117589A1 (en) * 2002-12-12 2004-06-17 International Business Machines Corp. Interrupt mechanism for a data processing system having hardware managed paging of disk data
US7634614B2 (en) * 2003-01-13 2009-12-15 Sierra Logic Integrated-circuit implementation of a storage-shelf router and a path controller card for combined use in high-availability mass-storage-device shelves and that support virtual disk formatting
JP2004220450A (ja) * 2003-01-16 2004-08-05 Hitachi Ltd ストレージ装置、その導入方法、及びその導入プログラム
JP4255699B2 (ja) * 2003-01-20 2009-04-15 株式会社日立製作所 記憶デバイス制御装置の制御方法、及び記憶デバイス制御装置
JP2004227098A (ja) * 2003-01-20 2004-08-12 Hitachi Ltd 記憶デバイス制御装置の制御方法、及び記憶デバイス制御装置
US7046668B2 (en) 2003-01-21 2006-05-16 Pettey Christopher J Method and apparatus for shared I/O in a load/store fabric
US7188209B2 (en) * 2003-04-18 2007-03-06 Nextio, Inc. Apparatus and method for sharing I/O endpoints within a load store fabric by encapsulation of domain information in transaction layer packets
US7698483B2 (en) 2003-01-21 2010-04-13 Nextio, Inc. Switching apparatus and method for link initialization in a shared I/O environment
US7917658B2 (en) 2003-01-21 2011-03-29 Emulex Design And Manufacturing Corporation Switching apparatus and method for link initialization in a shared I/O environment
US7103064B2 (en) 2003-01-21 2006-09-05 Nextio Inc. Method and apparatus for shared I/O in a load/store fabric
US7664909B2 (en) 2003-04-18 2010-02-16 Nextio, Inc. Method and apparatus for a shared I/O serial ATA controller
US8102843B2 (en) 2003-01-21 2012-01-24 Emulex Design And Manufacturing Corporation Switching apparatus and method for providing shared I/O within a load-store fabric
US7219183B2 (en) * 2003-01-21 2007-05-15 Nextio, Inc. Switching apparatus and method for providing shared I/O within a load-store fabric
US8032659B2 (en) 2003-01-21 2011-10-04 Nextio Inc. Method and apparatus for a shared I/O network interface controller
US8346884B2 (en) 2003-01-21 2013-01-01 Nextio Inc. Method and apparatus for a shared I/O network interface controller
JP4567293B2 (ja) * 2003-01-21 2010-10-20 株式会社日立製作所 ファイルサーバ
US7502370B2 (en) * 2003-01-21 2009-03-10 Nextio Inc. Network controller for obtaining a plurality of network port identifiers in response to load-store transactions from a corresponding plurality of operating system domains within a load-store architecture
US7617333B2 (en) 2003-01-21 2009-11-10 Nextio Inc. Fibre channel controller shareable by a plurality of operating system domains within a load-store architecture
US7836211B2 (en) 2003-01-21 2010-11-16 Emulex Design And Manufacturing Corporation Shared input/output load-store architecture
US7493416B2 (en) * 2003-01-21 2009-02-17 Nextio Inc. Fibre channel controller shareable by a plurality of operating system domains within a load-store architecture
US7457906B2 (en) * 2003-01-21 2008-11-25 Nextio, Inc. Method and apparatus for shared I/O in a load/store fabric
US7174413B2 (en) * 2003-01-21 2007-02-06 Nextio Inc. Switching apparatus and method for providing shared I/O within a load-store fabric
US7512717B2 (en) * 2003-01-21 2009-03-31 Nextio Inc. Fibre channel controller shareable by a plurality of operating system domains within a load-store architecture
US7953074B2 (en) 2003-01-21 2011-05-31 Emulex Design And Manufacturing Corporation Apparatus and method for port polarity initialization in a shared I/O device
US7222173B2 (en) * 2003-02-10 2007-05-22 International Business Machines Corporation Limited knowledge of configuration information of a FICON controller
US7831736B1 (en) 2003-02-27 2010-11-09 Cisco Technology, Inc. System and method for supporting VLANs in an iSCSI
US7295572B1 (en) 2003-03-26 2007-11-13 Cisco Technology, Inc. Storage router and method for routing IP datagrams between data path processors using a fibre channel switch
US20040193656A1 (en) * 2003-03-28 2004-09-30 Pizzo Michael J. Systems and methods for caching and invalidating database results and derived objects
US7904599B1 (en) 2003-03-28 2011-03-08 Cisco Technology, Inc. Synchronization and auditing of zone configuration data in storage-area networks
US7433300B1 (en) 2003-03-28 2008-10-07 Cisco Technology, Inc. Synchronization of configuration data in storage-area networks
US7174451B2 (en) * 2003-03-31 2007-02-06 Intel Corporation System and method for saving and/or restoring system state information over a network
JP4597488B2 (ja) 2003-03-31 2010-12-15 株式会社日立製作所 プログラム配置方法及びその実施システム並びにその処理プログラム
US7526527B1 (en) 2003-03-31 2009-04-28 Cisco Technology, Inc. Storage area network interconnect server
US6915378B2 (en) * 2003-04-23 2005-07-05 Hypernova Technologies, Inc. Method and system for improving the performance of a processing system
US20040221050A1 (en) * 2003-05-02 2004-11-04 Graham Smith Direct TCP/IP communication method and system for coupling to a CPU/Memory complex
JP2005018193A (ja) * 2003-06-24 2005-01-20 Hitachi Ltd ディスク装置のインタフェースコマンド制御方法ならびに計算機システム
US7451208B1 (en) 2003-06-28 2008-11-11 Cisco Technology, Inc. Systems and methods for network address failover
JP4437650B2 (ja) * 2003-08-25 2010-03-24 株式会社日立製作所 ストレージシステム
US7219201B2 (en) * 2003-09-17 2007-05-15 Hitachi, Ltd. Remote storage disk control device and method for controlling the same
JP4598387B2 (ja) * 2003-09-17 2010-12-15 株式会社日立製作所 記憶システム
JP4307202B2 (ja) * 2003-09-29 2009-08-05 株式会社日立製作所 記憶システム及び記憶制御装置
JP4257783B2 (ja) 2003-10-23 2009-04-22 株式会社日立製作所 論理分割可能な記憶装置及び記憶装置システム
JP2005135065A (ja) * 2003-10-29 2005-05-26 Hitachi Ltd 記憶デバイス制御装置、及び記憶デバイス制御装置の制御方法
JP4311637B2 (ja) * 2003-10-30 2009-08-12 株式会社日立製作所 記憶制御装置
US20050108316A1 (en) * 2003-11-18 2005-05-19 Sbc Knowledge Ventures, L.P. Methods and systems for organizing related communications
JP4152866B2 (ja) * 2003-11-19 2008-09-17 株式会社日立製作所 記憶装置、記憶装置システム、および、通信制御方法
US7613785B2 (en) * 2003-11-20 2009-11-03 International Business Machines Corporation Decreased response time for peer-to-peer remote copy write operation
JP4307964B2 (ja) 2003-11-26 2009-08-05 株式会社日立製作所 アクセス制限情報設定方法および装置
JP2005165441A (ja) * 2003-11-28 2005-06-23 Hitachi Ltd ストレージ制御装置、及びストレージ制御装置の制御方法
JP2005182122A (ja) * 2003-12-16 2005-07-07 Alpine Electronics Inc リムーバブル記録媒体及びそのファイル制御方法
JP4463042B2 (ja) 2003-12-26 2010-05-12 株式会社日立製作所 ボリュームの動的割り付け機能を有する記憶装置システム
JP2005202893A (ja) * 2004-01-19 2005-07-28 Hitachi Ltd 記憶デバイス制御装置、ストレージシステム、プログラムを記録した記録媒体、情報処理装置、及びストレージシステムの制御方法
JP4227035B2 (ja) * 2004-02-03 2009-02-18 株式会社日立製作所 計算機システム、管理装置、ストレージ装置及びコンピュータ装置
JP4391265B2 (ja) 2004-02-26 2009-12-24 株式会社日立製作所 ストレージサブシステムおよび性能チューニング方法
JP2005267008A (ja) 2004-03-17 2005-09-29 Hitachi Ltd ストレージ管理方法およびストレージ管理システム
JP4568021B2 (ja) 2004-04-05 2010-10-27 株式会社日立製作所 コマンド多重数監視制御方式を運用するコンピュータシステム
JP2005310025A (ja) 2004-04-26 2005-11-04 Hitachi Ltd ストレージ装置、計算機システムおよびイニシエータ認可方法
JP2005316574A (ja) * 2004-04-27 2005-11-10 Hitachi Ltd 計算機の識別子収集管理装置、方法及びプログラム
JP2005316548A (ja) 2004-04-27 2005-11-10 Hitachi Ltd 複数種のストレージネットワークを有する計算機システムおよび情報設定方法
JP4580693B2 (ja) * 2004-06-11 2010-11-17 株式会社日立製作所 共有排他制御方法
JP4484597B2 (ja) * 2004-06-28 2010-06-16 株式会社日立製作所 ストレージ装置及びストレージ装置の排他制御方法
US7383462B2 (en) * 2004-07-02 2008-06-03 Hitachi, Ltd. Method and apparatus for encrypted remote copy for secure data backup and restoration
JP4646574B2 (ja) 2004-08-30 2011-03-09 株式会社日立製作所 データ処理システム
JP4555036B2 (ja) * 2004-09-16 2010-09-29 株式会社日立製作所 ストレージ装置及びストレージ装置のデバイス切替制御方法
JP2006127028A (ja) * 2004-10-27 2006-05-18 Hitachi Ltd 記憶システム及び記憶制御装置
US7802026B2 (en) * 2004-11-15 2010-09-21 Marvell International Ltd. Method and system for processing frames in storage controllers
US7694038B2 (en) * 2004-11-17 2010-04-06 International Business Machines Corporation Maintaining and using nexus information on a host, port and device connection
US8799466B2 (en) * 2005-01-31 2014-08-05 Hewlett-Packard Development Company, L.P. Method and apparatus for automatic verification of a network access control construct for a network switch
US7519851B2 (en) * 2005-02-08 2009-04-14 Hitachi, Ltd. Apparatus for replicating volumes between heterogenous storage systems
JP2006252449A (ja) * 2005-03-14 2006-09-21 Toshiba Corp 不揮発性メモリモジュールおよび不揮発性メモリシステム
JP5031195B2 (ja) * 2005-03-17 2012-09-19 株式会社日立製作所 ストレージ管理ソフトウェア及びグルーピング方法
JP2007018401A (ja) 2005-07-11 2007-01-25 Hitachi Ltd 記憶制御装置、記憶制御装置の上位インターフェース制御部及び記憶制御装置の情報保護方法
US7640416B2 (en) * 2005-07-29 2009-12-29 International Business Machines Corporation Method for automatically relating components of a storage area network in a volume container
US7464219B2 (en) * 2005-08-01 2008-12-09 International Business Machines Corporation Apparatus, system, and storage medium for data protection by a storage device
US8819092B2 (en) 2005-08-16 2014-08-26 Rateze Remote Mgmt. L.L.C. Disaggregated resources and access methods
US20070076685A1 (en) * 2005-09-30 2007-04-05 Pak-Lung Seto Programmable routing for frame-packet based frame processing
JP4806557B2 (ja) * 2005-10-18 2011-11-02 株式会社日立製作所 ログを管理するストレージ装置及び計算機システム
US20070096871A1 (en) * 2005-10-28 2007-05-03 Mason David M Visitor pass for devices or for networks
US20070180210A1 (en) * 2006-01-31 2007-08-02 Seagate Technology Llc Storage device for providing flexible protected access for security applications
JP4740763B2 (ja) 2006-02-15 2011-08-03 株式会社日立製作所 ストレージシステム及びストレージコントローラ
US7949301B2 (en) 2006-07-21 2011-05-24 Research In Motion Limited Mobile communications device access from personal computer
US8156296B2 (en) 2006-07-28 2012-04-10 Dell Products L.P. System and method for managing resets in a system using shared storage
US8479264B2 (en) * 2006-09-29 2013-07-02 Micron Technology, Inc. Architecture for virtual security module
JP2008102672A (ja) 2006-10-18 2008-05-01 Hitachi Ltd 計算機システム、管理計算機、操作制御情報の設定方法
JP4902403B2 (ja) 2006-10-30 2012-03-21 株式会社日立製作所 情報システム及びデータ転送方法
US7952882B2 (en) * 2006-10-30 2011-05-31 International Business Machines Corporation On demand storage array
JP5244332B2 (ja) * 2006-10-30 2013-07-24 株式会社日立製作所 情報システム、データ転送方法及びデータ保護方法
JP5057366B2 (ja) 2006-10-30 2012-10-24 株式会社日立製作所 情報システム及び情報システムのデータ転送方法
US20080159277A1 (en) * 2006-12-15 2008-07-03 Brocade Communications Systems, Inc. Ethernet over fibre channel
US20080181243A1 (en) * 2006-12-15 2008-07-31 Brocade Communications Systems, Inc. Ethernet forwarding in high performance fabrics
JP2008226040A (ja) * 2007-03-14 2008-09-25 Hitachi Ltd 情報処理装置及びコマンド多重度制御方法
JP4723532B2 (ja) * 2007-04-19 2011-07-13 株式会社日立製作所 計算機システム、及び該計算機システムに用いられる計算機並びに記憶装置
JP4564035B2 (ja) * 2007-08-01 2010-10-20 株式会社日立製作所 計算機システム、及び該計算機システムに用いられる計算機並びに記憶装置
JP2008059599A (ja) * 2007-09-28 2008-03-13 Hitachi Ltd 仮想化されたリソースの割当て方法及びその実施システム
US8583780B2 (en) * 2007-11-20 2013-11-12 Brocade Communications Systems, Inc. Discovery of duplicate address in a network by reviewing discovery frames received at a port
JP2009129165A (ja) * 2007-11-22 2009-06-11 Toshiba Corp 画像処理装置及びその方法
US8108454B2 (en) * 2007-12-17 2012-01-31 Brocade Communications Systems, Inc. Address assignment in Fibre Channel over Ethernet environments
JP4639223B2 (ja) * 2007-12-27 2011-02-23 株式会社日立製作所 ストレージサブシステム
US20090296726A1 (en) * 2008-06-03 2009-12-03 Brocade Communications Systems, Inc. ACCESS CONTROL LIST MANAGEMENT IN AN FCoE ENVIRONMENT
JP2008276806A (ja) * 2008-08-05 2008-11-13 Hitachi Ltd 記憶装置
CN101359301A (zh) * 2008-08-19 2009-02-04 成都市华为赛门铁克科技有限公司 一种自动快照的方法及设备
US8510750B2 (en) * 2008-09-23 2013-08-13 1060 Research Limited Method for caching resource representations in a contextual address space
US8848575B2 (en) * 2009-02-23 2014-09-30 Brocade Communications Systems, Inc. High availability and multipathing for fibre channel over ethernet
US20100216441A1 (en) * 2009-02-25 2010-08-26 Bo Larsson Method for photo tagging based on broadcast assisted face identification
JP4932877B2 (ja) * 2009-07-14 2012-05-16 株式会社日立製作所 業務リソース管理方法及びその実施システム
US8402118B2 (en) * 2010-04-09 2013-03-19 International Business Machines Corporation Intelligent LUN generation and management
US8429391B2 (en) 2010-04-16 2013-04-23 Micron Technology, Inc. Boot partitions in memory devices and systems
US9386097B2 (en) * 2010-04-23 2016-07-05 Cisco Technology, Inc. Using values represented as internet protocol (IP) addresses to access resources in a non-internet protocol address space
JP5760592B2 (ja) * 2011-03-30 2015-08-12 日本電気株式会社 共有ファイルシステムのストレージアクセス制御方法
KR101755650B1 (ko) 2011-04-26 2017-07-10 삼성전자주식회사 스토리지 디바이스를 위한 ｉ/ｏ 스케쥴링 장치 및 ｉ/ｏ 스케쥴링 방법
DE112012005154T5 (de) * 2011-12-08 2015-03-19 International Business Machines Corporation Verfahren zum Erkennen eines Datenverlusts während einer Datenübertragung zwischen Informationseinheiten
JP2013164820A (ja) * 2012-02-13 2013-08-22 Fujitsu Ltd 評価支援方法、評価支援プログラムおよび評価支援装置
US8554954B1 (en) * 2012-03-31 2013-10-08 Emc Corporation System and method for improving cache performance
US8914585B1 (en) 2012-03-31 2014-12-16 Emc Corporation System and method for obtaining control of a logical unit number
US8874799B1 (en) 2012-03-31 2014-10-28 Emc Corporation System and method for improving cache performance
US8914584B1 (en) 2012-03-31 2014-12-16 Emc Corporation System and method for improving cache performance upon detection of a LUN control event
JP6529304B2 (ja) * 2015-03-25 2019-06-12 株式会社日立ソリューションズ アクセス制御システム及びアクセス制御方法
US11201749B2 (en) 2019-09-11 2021-12-14 International Business Machines Corporation Establishing a security association and authentication to secure communication between an initiator and a responder
US11308243B2 (en) 2019-09-11 2022-04-19 International Business Machines Corporation Maintenance of access for security enablement in a storage device
US11206144B2 (en) 2019-09-11 2021-12-21 International Business Machines Corporation Establishing a security association and authentication to secure communication between an initiator and a responder
US11188658B2 (en) 2019-09-11 2021-11-30 International Business Machines Corporation Concurrent enablement of encryption on an operational path at a storage port
US11188659B2 (en) 2019-09-11 2021-11-30 International Business Machines Corporation Concurrent enablement of encryption on an operational path at a host port
US11354455B2 (en) 2019-09-11 2022-06-07 International Business Machines Corporation Maintenance of access for security enablement on a host system
US11303441B2 (en) 2019-09-25 2022-04-12 International Business Machines Corporation Reverting from a new security association to a previous security association in response to an error during a rekey operation
US11245521B2 (en) 2019-09-25 2022-02-08 International Business Machines Corporation Reverting from a new security association to a previous security association in response to an error during a rekey operation

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4947318A (en) * 1983-11-16 1990-08-07 Hitachi, Ltd. Data processing security system for automatically transferring software protection data from removable store into internal memory upon mounting of stores
JPH05324445A (ja) * 1992-05-22 1993-12-07 Mitsubishi Electric Corp ファイル・データのアクセス・パミッション方法
JPH0695859A (ja) * 1992-09-09 1994-04-08 Fujitsu Ltd ソフトウェア資産管理方式

Family Cites Families (88)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JPS62147837A (ja) 1985-12-23 1987-07-01 Hitachi Ltd Ｌａｎでの閉域接続方式
JPS63163951A (ja) 1986-12-26 1988-07-07 Nippon Telegr & Teleph Corp <Ntt> アクセス権制御方式
JPS63253450A (ja) 1987-04-10 1988-10-20 Hitachi Ltd フアイル・アクセスの管理方式
JPS63253448A (ja) 1987-04-10 1988-10-20 Hitachi Ltd マルチ計算機装置
JPH01181139A (ja) 1988-01-14 1989-07-19 Sanyo Electric Co Ltd 情報フアイル装置
JPH0673099B2 (ja) 1988-04-05 1994-09-14 日本電気株式会社 ファイル装置の占有制御方式
US4919656A (en) * 1988-04-11 1990-04-24 Biosurge, Inc. Safety device for hypodermic syringe to prevent stick injuries
US5297268A (en) * 1988-06-03 1994-03-22 Dallas Semiconductor Corporation ID protected memory with a readable/writable ID template
US4989206A (en) * 1988-06-28 1991-01-29 Storage Technology Corporation Disk drive memory
US4989205A (en) 1988-06-28 1991-01-29 Storage Technology Corporation Disk drive memory
US4914656A (en) 1988-06-28 1990-04-03 Storage Technology Corporation Disk drive memory
US5077736A (en) 1988-06-28 1991-12-31 Storage Technology Corporation Disk drive memory
JPH0291747A (ja) * 1988-09-29 1990-03-30 Hitachi Ltd 情報処理装置
JP2602922B2 (ja) * 1988-11-02 1997-04-23 日本電信電話株式会社 負荷の分散処理方法
JPH03105419A (ja) 1989-09-19 1991-05-02 Shikoku Nippon Denki Software Kk 固定ディスク装置
JPH03110619A (ja) * 1989-09-25 1991-05-10 Nec Corp 電子計算機装置
US5237668A (en) 1989-10-20 1993-08-17 International Business Machines Corporation Process using virtual addressing in a non-privileged instruction to control the copying of a page of data in or between multiple media
JPH03152652A (ja) 1989-11-08 1991-06-28 Mitsubishi Electric Corp ネットワークセキュリティシステム
JPH03152650A (ja) 1989-11-09 1991-06-28 Ricoh Co Ltd コンピュータシステムのバス多重化方法
US5124987A (en) 1990-04-16 1992-06-23 Storage Technology Corporation Logical track write scheduling system for a parallel disk drive array data storage subsystem
JP2562378B2 (ja) * 1990-07-04 1996-12-11 シャープ株式会社 記録装置
US5163096A (en) 1991-06-06 1992-11-10 International Business Machines Corporation Storage protection utilizing public storage key control
US5274783A (en) * 1991-06-28 1993-12-28 Digital Equipment Corporation SCSI interface employing bus extender and auxiliary bus
JPH05181609A (ja) 1992-01-06 1993-07-23 Nec Corp パーソナルコンピュータシステム
JPH05225068A (ja) 1992-02-14 1993-09-03 Hitachi Ltd 機密保護ソフトウェアのアクセス制御方式
JP2868141B2 (ja) 1992-03-16 1999-03-10 株式会社日立製作所 ディスクアレイ装置
US5239632A (en) 1992-04-16 1993-08-24 Hewlett-Packard Company Device to translate logical unit number communications on one SCSI bus to ID communications on a subordinate SCSI bus
US5337414A (en) * 1992-09-22 1994-08-09 Unisys Corporation Mass data storage and retrieval system
US5282247A (en) 1992-11-12 1994-01-25 Maxtor Corporation Apparatus and method for providing data security in a computer system having removable memory
JPH06214863A (ja) 1993-01-13 1994-08-05 Fuji Xerox Co Ltd 情報資源管理装置
JPH06236325A (ja) 1993-02-08 1994-08-23 Sansei Denshi Japan Kk データ記憶装置
US5533125A (en) 1993-04-06 1996-07-02 International Business Machines Corporation Removable computer security device
US5617425A (en) 1993-05-26 1997-04-01 Seagate Technology, Inc. Disc array having array supporting controllers and interface
JPH07104882A (ja) * 1993-10-06 1995-04-21 Toshiba Corp ポータブルコンピュータシステム
US5548783A (en) 1993-10-28 1996-08-20 Dell Usa, L.P. Composite drive controller including composite disk driver for supporting composite drive accesses and a pass-through driver for supporting accesses to stand-alone SCSI peripherals
AU1265195A (en) 1993-12-06 1995-06-27 Telequip Corporation Secure computer memory card
US5651139A (en) 1993-12-23 1997-07-22 International Business Machines Corporation Protected system partition read/write access on a SCSI controlled DASD
JPH07210336A (ja) 1994-01-17 1995-08-11 Hitachi Ltd データ格納装置
US6219726B1 (en) * 1994-07-27 2001-04-17 International Business Machines Corporation System for providing access protection on media storage devices by selecting from a set of generated control parameters in accordance with application attributes
JPH08115279A (ja) 1994-10-14 1996-05-07 Hitachi Ltd マルチメディアｖｏｄシステムにおけるディスクアクセス方法
US5528584A (en) 1994-10-27 1996-06-18 Hewlett-Packard Company High performance path allocation system and method with fairness insurance mechanism for a fiber optic switch
JPH08129514A (ja) * 1994-10-31 1996-05-21 Nippon Telegr & Teleph Corp <Ntt> 遠隔周辺機器の接続方法及び装置
US5644789A (en) 1995-01-19 1997-07-01 Hewlett-Packard Company System and method for handling I/O requests over an interface bus to a storage disk array
JP3105419B2 (ja) 1995-02-13 2000-10-30 大同工業株式会社 シールチェーン装置
US5671390A (en) * 1995-05-23 1997-09-23 International Business Machines Corporation Log structured array storage subsystem using LSA directory and LSA sub-directory stored in different storage media
US5628005A (en) * 1995-06-07 1997-05-06 Microsoft Corporation System and method for providing opportunistic file access in a network environment
US5729763A (en) * 1995-08-15 1998-03-17 Emc Corporation Data storage system
US5768623A (en) 1995-09-19 1998-06-16 International Business Machines Corporation System and method for sharing multiple storage arrays by dedicating adapters as primary controller and secondary controller for arrays reside in different host computers
US5610746A (en) * 1995-09-29 1997-03-11 Ranalli; Eliseo R. Programmable switched delay encoder
US5748924A (en) 1995-10-17 1998-05-05 Methode Electronics, Inc. Method and apparatus for transferring data from SCSI bus to serial device and from serial device to SCSI bus
US5610745A (en) 1995-10-26 1997-03-11 Hewlett-Packard Co. Method and apparatus for tracking buffer availability
US5872822A (en) * 1995-10-26 1999-02-16 Mcdata Corporation Method and apparatus for memory sequencing
US5805800A (en) 1995-11-07 1998-09-08 Fujitsu Limited Apparatus and method for controlling storage medium using security capabilities
US5805920A (en) 1995-11-13 1998-09-08 Tandem Computers Incorporated Direct bulk data transfers
JP2718407B2 (ja) * 1995-12-15 1998-02-25 日本電気株式会社 光スイッチ装置及び光スイッチ制御方法
US5809328A (en) 1995-12-21 1998-09-15 Unisys Corp. Apparatus for fibre channel transmission having interface logic, buffer memory, multiplexor/control device, fibre channel controller, gigabit link module, microprocessor, and bus control device
US5806800A (en) * 1995-12-22 1998-09-15 Caplin; Glenn N. Dual function deployable radiator cover
US5768530A (en) * 1995-12-28 1998-06-16 Emc Corporation High speed integrated circuit interface for fibre channel communications
US5657445A (en) 1996-01-26 1997-08-12 Dell Usa, L.P. Apparatus and method for limiting access to mass storage devices in a computer system
US5663724A (en) 1996-03-28 1997-09-02 Seagate Technology, Inc. 16B/20B encoder
US5835496A (en) 1996-04-30 1998-11-10 Mcdata Corporation Method and apparatus for data alignment
US5848251A (en) 1996-08-06 1998-12-08 Compaq Computer Corporation Secondary channel for command information for fibre channel system interface bus
JP2982702B2 (ja) * 1996-08-30 1999-11-29 日本電気株式会社 ディスク装置
US5894481A (en) * 1996-09-11 1999-04-13 Mcdata Corporation Fiber channel switch employing distributed queuing
US5812754A (en) 1996-09-18 1998-09-22 Silicon Graphics, Inc. Raid system with fibre channel arbitrated loop
US6118776A (en) * 1997-02-18 2000-09-12 Vixel Corporation Methods and apparatus for fiber channel interconnection of private loop devices
US6185203B1 (en) * 1997-02-18 2001-02-06 Vixel Corporation Fibre channel switching fabric
US5913227A (en) 1997-03-24 1999-06-15 Emc Corporation Agent-implemented locking mechanism
US6073209A (en) * 1997-03-31 2000-06-06 Ark Research Corporation Data storage controller providing multiple hosts with access to multiple storage subsystems
JP3228182B2 (ja) * 1997-05-29 2001-11-12 株式会社日立製作所 記憶システム及び記憶システムへのアクセス方法
JPH10340243A (ja) * 1997-06-06 1998-12-22 Hitachi Ltd 入出力データ転送システム
US6263370B1 (en) * 1997-09-04 2001-07-17 Mci Communications Corporation TCP/IP-based client interface to network information distribution system servers
US5941969A (en) 1997-10-22 1999-08-24 Auspex Systems, Inc. Bridge for direct data storage device access
US5941972A (en) * 1997-12-31 1999-08-24 Crossroads Systems, Inc. Storage router and method for providing virtual local storage
US6061753A (en) * 1998-01-27 2000-05-09 Emc Corporation Apparatus and method of accessing target devices across a bus utilizing initiator identifiers
US6041381A (en) 1998-02-05 2000-03-21 Crossroads Systems, Inc. Fibre channel to SCSI addressing method and system
US6148349A (en) * 1998-02-06 2000-11-14 Ncr Corporation Dynamic and consistent naming of fabric attached storage by a file system on a compute node storing information mapping API system I/O calls for data objects with a globally unique identification
US7398286B1 (en) * 1998-03-31 2008-07-08 Emc Corporation Method and system for assisting in backups and restore operation over different channels
US6421711B1 (en) * 1998-06-29 2002-07-16 Emc Corporation Virtual ports for data transferring of a data storage system
US6295575B1 (en) 1998-06-29 2001-09-25 Emc Corporation Configuring vectors of logical storage units for data storage partitioning and sharing
JP3152650B2 (ja) 1999-08-04 2001-04-03 シーアイ化成株式会社 超小型ブラシモータにおけるスプリング導電体、スプリング導電体を取り付けるエンドプレート、およびエンドプレート組立体、並びに振動発生装置
US6343324B1 (en) 1999-09-13 2002-01-29 International Business Machines Corporation Method and system for controlling access share storage devices in a network environment by configuring host-to-volume mapping data structures in the controller memory for granting and denying access to the devices
JP4091225B2 (ja) 1999-11-19 2008-05-28 富士通株式会社 ディスク・タイムシェアリング装置及び方法
US6708265B1 (en) * 2000-06-27 2004-03-16 Emc Corporation Method and apparatus for moving accesses to logical entities from one storage element to another storage element in a computer storage system
JP2005324445A (ja) 2004-05-14 2005-11-24 Seiko Epson Corp プリンタ及びプリンタの制御方法
JP5225068B2 (ja) 2006-02-23 2013-07-03 富士通株式会社 画像処理装置及び画像処理方法
EP2089377B1 (fr) 2006-09-11 2013-04-10 Advent Technologies Développement et caractérisation de nouveaux copolymères de type polyéther aromatique conducteur de protons portant des groupes de pyridine à chaînes principales et latérales
JP5181609B2 (ja) 2007-10-05 2013-04-10 住友化学株式会社 ピラゾリノン誘導体の製造方法

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4947318A (en) * 1983-11-16 1990-08-07 Hitachi, Ltd. Data processing security system for automatically transferring software protection data from removable store into internal memory upon mounting of stores
JPH05324445A (ja) * 1992-05-22 1993-12-07 Mitsubishi Electric Corp ファイル・データのアクセス・パミッション方法
JPH0695859A (ja) * 1992-09-09 1994-04-08 Fujitsu Ltd ソフトウェア資産管理方式

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
X3T11 TECHNICAL COMMITTEE: "FIBRE CHANNEL - Physical and Signaling Interface (FC-PH) - REV 4.3"[Online] 1 June 1994 (1994-06-01), pages 1-478, XP007900843 Retrieved from the Internet: URL:ftp://ftp.t11.org/t11/member/fc/ph/fcp h_43.pdf> [retrieved on 2006-07-18] *

Cited By (51)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6854034B1 (en) * 1999-08-27 2005-02-08 Hitachi, Ltd. Computer system and a method of assigning a storage device to a computer
EP1221100A1 (fr) * 1999-09-13 2002-07-10 International Business Machines Corporation Systeme et procede de mise en correspondance de volumes d'hotes dans un environnement informatique a hotes multiples
EP1221100A4 (fr) * 1999-09-13 2007-07-18 Ibm Systeme et procede de mise en correspondance de volumes d'hotes dans un environnement informatique a hotes multiples
EP1115064A3 (fr) * 1999-12-14 2004-12-29 Hitachi, Ltd. Sous-système de stockage et contrôleur de stockage
US7213141B2 (en) 1999-12-14 2007-05-01 Hitachi, Ltd. Storage subsystem and storage controller
US7461245B2 (en) 1999-12-14 2008-12-02 Hitachi, Ltd. Storage subsystem and storage controller
US8015325B2 (en) 1999-12-14 2011-09-06 Hitachi, Ltd. Storage subsystem and storage controller having memory which stores management information indicating corresponding relations between processors and identifies of logical units
US6742034B1 (en) 1999-12-16 2004-05-25 Dell Products L.P. Method for storage device masking in a storage area network and storage controller and storage subsystem for using such a method
DE10065642B4 (de) * 1999-12-30 2006-09-21 Avago Technologies Storage Ip (Singapore) Pte. Ltd. Verfahren zum Abschließen der Ausführung einer Ferntransaktion in einem Faserkanalknoten und Faserkanalknoten, der die Ausführung einer Ferntransaktion abschließt
US7657727B2 (en) 2000-01-14 2010-02-02 Hitachi, Ltd. Security for logical unit in storage subsystem
US6947938B2 (en) 2000-01-14 2005-09-20 Hitachi, Ltd. Security method and system for storage subsystem
US7908459B2 (en) 2000-01-14 2011-03-15 Hitachi, Ltd. Security for logical unit in storage subsystem
US7024410B2 (en) 2000-01-14 2006-04-04 Hitachi, Ltd. Security method and system for storage subsystem
US6684209B1 (en) 2000-01-14 2004-01-27 Hitachi, Ltd. Security method and system for storage subsystem
US7606806B2 (en) 2000-01-14 2009-10-20 Hitachi, Ltd. Security method and system for storage subsystem
US6460113B1 (en) 2000-01-25 2002-10-01 Dell Products L.P. System and method for performing backup operations using a fibre channel fabric in a multi-computer environment
US7409391B2 (en) 2000-02-07 2008-08-05 Emc Corporation Controlling access to a storage device
EP1124172A2 (fr) * 2000-02-07 2001-08-16 Emc Corporation Contrôler l'accès à un dispositif de stockage
EP1122628A2 (fr) * 2000-02-07 2001-08-08 Emc Corporation Contrôler l'accès à un dispositif de stockage
EP1124172A3 (fr) * 2000-02-07 2004-08-18 Emc Corporation Contrôler l'accès à un dispositif de stockage
EP1122628A3 (fr) * 2000-02-07 2004-11-24 Emc Corporation Contrôler l'accès à un dispositif de stockage
CN100407188C (zh) * 2000-03-09 2008-07-30 戴尔产品有限公司 在群集计算环境中管理存储资源的系统和方法
US8195904B2 (en) 2000-05-24 2012-06-05 Hitachi, Ltd. Method and apparatus for controlling access to storage device
US7130978B2 (en) 2000-05-24 2006-10-31 Hitachi, Ltd. Method and apparatus for controlling access to storage device
US6968434B2 (en) 2000-05-24 2005-11-22 Hitachi, Ltd. Method and apparatus for controlling access to storage device
EP1158386A3 (fr) * 2000-05-24 2006-12-13 Hitachi, Ltd. Procédé et dispositif de contrôle d'accès à un dispositif de stockage de données
US8095757B2 (en) 2000-05-24 2012-01-10 Hitachi, Ltd. Method and apparatus for controlling access to storage device
US6950871B1 (en) * 2000-06-29 2005-09-27 Hitachi, Ltd. Computer system having a storage area network and method of handling data in the computer system
US7107332B2 (en) 2001-04-10 2006-09-12 Hitachi, Ltd. Storage controller and computer system for managing information related to connection port
US7047290B2 (en) 2001-04-10 2006-05-16 Hitachi, Ltd. Storage controller and computer system for managing information related to connection port
EP1249752A3 (fr) * 2001-04-10 2007-01-17 Hitachi, Ltd. Contrôleur de stockage et système informatique de gestion d'informations associées avec un port de connexion
US7051167B2 (en) 2001-07-13 2006-05-23 Hitachi, Ltd. Security for logical unit in storage subsystem
US6779083B2 (en) 2001-07-13 2004-08-17 Hitachi, Ltd. Security for logical unit in storage subsystem
US7082503B2 (en) 2001-07-13 2006-07-25 Hitachi, Ltd. Security for logical unit in storage system
US7082497B2 (en) 2001-12-28 2006-07-25 Hewlett-Packard Development Company, L.P. System and method for managing a moveable media library with library partitions
US7363425B2 (en) 2001-12-28 2008-04-22 Hewlett-Packard Development Company, L.P. System and method for securing drive access to media based on medium identification numbers
US8788611B2 (en) 2001-12-28 2014-07-22 Hewlett-Packard Development Company, L.P. Method for using partitioning to provide capacity on demand in data libraries
EP1324174A3 (fr) * 2001-12-28 2005-11-09 Hewlett-Packard Company La méthode pour l'usage de la division pour fournir la capacité sur demande dans des bibliothèques de donnés
US7222172B2 (en) 2002-04-26 2007-05-22 Hitachi, Ltd. Storage system having virtualized resource
US7469289B2 (en) 2002-04-26 2008-12-23 Hitachi, Ltd. Storage system having virtualized resource
US7111138B2 (en) 2003-09-16 2006-09-19 Hitachi, Ltd. Storage system and storage control device
GB2408602B (en) * 2003-11-27 2005-11-30 Hitachi Ltd Access control apparatus and access control method
US7127543B2 (en) 2003-11-27 2006-10-24 Hitachi, Ltd. Access control apparatus and access control method
GB2408602A (en) * 2003-11-27 2005-06-01 Hitachi Ltd Controlling remote access to storage in accordance with the SCSI protocol
US7457929B2 (en) 2003-12-15 2008-11-25 Hitachi, Ltd. Data processing system having a plurality of storage systems
US7930500B2 (en) 2003-12-15 2011-04-19 Hitachi, Ltd. Data processing system having a plurality of storage systems
US7827369B2 (en) 2003-12-15 2010-11-02 Hitachi, Ltd. Data processing system having a plurality of storage systems
US7216209B2 (en) 2003-12-15 2007-05-08 Hitachi, Ltd. Data processing system having a plurality of storage systems
US8489835B2 (en) 2003-12-15 2013-07-16 Hitachi, Ltd. Data processing system having a plurality of storage systems
WO2006062783A2 (fr) * 2004-12-10 2006-06-15 Storage Technology Corporation Procede de prevention de la corruption de donnees causee par des connexions inappropriees d'une unite de commande de stockage
WO2006062783A3 (fr) * 2004-12-10 2006-09-14 Storage Technology Corp Procede de prevention de la corruption de donnees causee par des connexions inappropriees d'une unite de commande de stockage

Also Published As

Publication number Publication date
US6507896B2 (en) 2003-01-14
US20010009024A1 (en) 2001-07-19
US20110173388A1 (en) 2011-07-14
US6877073B2 (en) 2005-04-05
US20100011132A1 (en) 2010-01-14
US20010011332A1 (en) 2001-08-02
US20010011333A1 (en) 2001-08-02
US6742090B2 (en) 2004-05-25
US6523096B2 (en) 2003-02-18
JPH10333839A (ja) 1998-12-18
US6728844B2 (en) 2004-04-27
JP3633436B2 (ja) 2005-03-30
US8583877B2 (en) 2013-11-12
JP3987672B2 (ja) 2007-10-10
US20050172052A1 (en) 2005-08-04
US6535964B2 (en) 2003-03-18
US20010008010A1 (en) 2001-07-12
EP0881560A3 (fr) 2006-08-23
EP2249225A1 (fr) 2010-11-10
US6609180B2 (en) 2003-08-19
US20020083285A1 (en) 2002-06-27
US6484245B1 (en) 2002-11-19
JP3228182B2 (ja) 2001-11-12
US20040168033A1 (en) 2004-08-26
US7606984B2 (en) 2009-10-20
EP2163962A2 (fr) 2010-03-17
US8275950B2 (en) 2012-09-25
US20020010843A1 (en) 2002-01-24
EP2163962A3 (fr) 2010-05-05
JP2000339225A (ja) 2000-12-08
JP2000339226A (ja) 2000-12-08

Similar Documents

Publication Publication Date Title
US6507896B2 (en) Protocol for use in accessing a storage region across a network
US7062629B2 (en) Apparatus and method for partitioning and managing subsystem logics
US6493825B1 (en) Authentication of a host processor requesting service in a data processing network
US7237079B2 (en) Data migration method and a data migration apparatus
US7984133B2 (en) Computer and access control method in a computer
JP2004362600A (ja) 記憶制御装置及び記憶システム
JP2007250009A (ja) 記憶制御装置及び記憶システム

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

AK Designated contracting states

Kind code of ref document: A2

Designated state(s): AT BE CH CY DE DK ES FI FR GB GR IE IT LI LU MC NL PT SE

AX Request for extension of the european patent

Free format text: AL;LT;LV;MK;RO;SI

17P Request for examination filed

Effective date: 20060331

PUAL Search report despatched

Free format text: ORIGINAL CODE: 0009013

AK Designated contracting states

Kind code of ref document: A3

Designated state(s): AT BE CH CY DE DK ES FI FR GB GR IE IT LI LU MC NL PT SE

AX Request for extension of the european patent

Extension state: AL LT LV MK RO SI

17Q First examination report despatched

Effective date: 20061113

AKX Designation fees paid

Designated state(s): DE FR GB

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION IS DEEMED TO BE WITHDRAWN

18D Application deemed to be withdrawn

Effective date: 20091222